CVE-2013-0247

OpenStack Keystone Essex 2012.1.3 and earlier, Folsom 2012.2.3 and earlier, and Grizzly grizzly-2 and earlier allows remote attackers to cause a denial of service (disk consumption) via many invalid token requests that trigger excessive generation of log entries.

• CWE-399

• http://lists.fedoraproject.org/pipermail/package-announce/2013-February/098906.htmlThird Party Advisory
• http://rhn.redhat.com/errata/RHSA-2013-0253.htmlThird Party Advisory
• http://www.securityfocus.com/bid/57747Third Party Advisory, VDB Entry
• http://www.ubuntu.com/usn/USN-1715-1Third Party Advisory
• https://bugs.launchpad.net/keystone/+bug/1098307Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=906171Patch, Third Party Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2013-February/098906.htmlThird Party Advisory
• http://rhn.redhat.com/errata/RHSA-2013-0253.htmlThird Party Advisory
• http://www.securityfocus.com/bid/57747Third Party Advisory, VDB Entry
• http://www.ubuntu.com/usn/USN-1715-1Third Party Advisory
• https://bugs.launchpad.net/keystone/+bug/1098307Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=906171Patch, Third Party Advisory

Published

Feb 24, 2013

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2013-0241The QXL display driver in QXL Virtual GPU 0.1.0 allows local…
• CVE-2013-0242Buffer overflow in the extend_buffers function in the regula…
• CVE-2013-0243haskell-tls-extra before 0.6.1 has Basic Constraints attribu…7.4
• CVE-2013-0244Cross-site scripting (XSS) vulnerability in Drupal 6.x befor…
• CVE-2013-0245The printer friendly version functionality in the Book modul…
• CVE-2013-0246The Image module in Drupal 7.x before 7.19, when a private f…
• CVE-2013-0248The default configuration of javax.servlet.context.tempdir i…
• CVE-2013-0249Stack-based buffer overflow in the Curl_sasl_create_digest_m…
• CVE-2013-0250The init_nss_hash function in exec/totemcrypto.c in Corosync…
• CVE-2013-0251Stack-based buffer overflow in llogincircuit.cc in latd 1.25…
• CVE-2013-0252boost::locale::utf::utf_traits in the Boost.Locale library i…
• CVE-2013-0253The default configuration of Apache Maven 3.0.4, when using …